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Top Stories 

• Officials from Freedom Industries proposed June 14 to double its runoff pumping capacity 
and indefinitely post contractors at its chemical facility in Charleston, West Virginia, after 
regulators ordered the company to fix a storm water collection trench that overflowed into 
the Elk River June 12 and 13. - Charleston Gazette (See item 4) 

• The U.S. Securities and Exchange Commission filed charges June 13 against four 
California men for allegedly engaging in insider trading of Ross Stores stocks that resulted 
in $12 million in illicit profits. - U.S. Securities and Exchange Commission (See item 11) 

• Crews in Bakersfield, California, worked to contain the 2,000-acre Shirley Fire June 15 
while more than 1,000 threatened residences were ordered to evacuate. - CBS News (See 
item 27) 

• Ball State University in Indiana announced June 13 that the university was the victim of 
two investment fraud schemes allegedly made by a former director of cash and investments 
that cost the university $13.1 million. - Muncie Star Press (See item 32) 
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Energy Sector 



1. June 15, Minneapolis Star Tribune - (Minnesota) Wind-damaged Twin Cities now 
facing a week of rain. An estimated 50,000 Xcel Energy customers across the 
Minneapolis-St. Paul area lost power after a June 14 storm caused high winds, 
prompting officials to delay flights and ground planes at Minneapolis-St. Paul 
International Airport until winds subsided. Water parks and the annual Juneteenth Twin 
Cities festival were also closed and cancelled due to the storm. 

Source: http://www.startribune.com/local/west/263155351.html 

2. June 13, Phoenix Arizona Republic - (Arizona) Concern widens over sabotage at 
Nogales power station. Authorities continue to investigate after Nogales Police 
determined June 13 that a crude incendiary device placed next to a 50,000 gallon diesel 
tank at the UniSource Energy Services-owned Valencia Generating Station in Arizona 
did not explode, only ignited, charring the steel tank June 11. 

Source: http://azstarnet.com/business/local/sabotage-at-nogales-plant-puts-focus-on- 
threats-to-grid/article 49b7eedf-d0d3-5dd7-8344-2b9d92989878.html 

T Return to top i 

Chemical Industry Sector 

3. June 14, Orangeburg Times and Democrat - (Tennessee) Eastman operations 
restored at Kingsport. Eastman Chemical Company representatives announced June 
13 that its Kingsport, Tennessee facility was brought back online and operations were 
substantially restored following an unplanned outage June 4. 

Source: http://thetandd.com/business/eastman-operations-restored-at- 
kingsport/article 219c07d8-f37f-l Ie3-807c-0019bb2963f4.html 

4. June 14, Charleston Gazette - (West Virginia) Freedom proposes runoff control 
steps in face of DEP orders, water company criticism. Officials from Freedom 
Industries proposed June 14 to double its runoff pumping capacity and indefinitely post 
contractors at its chemical facility in Charleston, West Virginia, after regulators ordered 
the company to fix a storm water collection trench that overflowed into the Elk River 
June 12 and 13. Water company officials reported that 6 samples taken after the 
overflow yielded no detection of hazardous chemicals after the company closed 2 
pumps for 3 hours as a precaution. 

Source: http://www.wvgazette.com/article/20140614/GZ01/140619571 

5. June 13, Atlanta Journal-Constitution - (Georgia) Marietta chemical plant fire losses 
top $20 million. A report released by fire officials stated that total losses from a series 
of explosions and a fire that tore through an Amrep chemical warehouse in Marietta, 
Georgia, May 23 were estimated at $20.5 million and leaks were found May 24 coming 
from two large tanks at the site. One worker was injured in the incident, and employees 
were safely evacuated from the plant. 

Source: http://www.aic.com/news/news/local/marietta-chemical-plant-fire-losses-top- 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 

6. June 15, Reuters - (National) U.S. orders mandatory inspections for F-35s after 
engine issue. A representative for the Pentagon’s F-35 program office stated that the 
U.S. military ordered mandatory inspections of all Lockheed Martin F-35 fighter 
aircraft June 13 following an in-flight emergency with a Marine Corps F-35B June 10 
in Yuma, Arizona. Inspections focused on the oil flow management valve in the 
aircrafts’ engines, and majority of the fleet’s 97 aircraft were inspected and cleared to 
resume flights Junel6. 

Source: http://www.reuters.com/article/2014/06/15/us-lockheed-fighter- 
idU S KBNOEQ 1 9 V 20 1 406 1 5 

For another story, see item 28 
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Financial Services Sector 

7. June 16, Threatpost - (International) Dyreza banker trojan seen bypassing SSL. 
Researchers identified a new banking trojan known as Dyre or Dyreza that uses 
browser hooking to intercept traffic moving between victims' systems and their 
intended Web site, allowing attackers to bypass SSL protections and redirect traffic 
through the attackers' servers. Researchers at CSIS Group found that the trojan is 
spread through spam messages and then contacts command and control servers, some 
of which are located in Latvia. 

Source: http://threatpost.com/dvreza-banker-troian-seen-bypassing-ssl/106671 

8. June 16, Financial Industry Regulatory Authority - (National) FINRA fines Merrill 
Lynch $8 million; over $89 million repaid to retirement accounts and charities 
overcharged for mutual funds. The Financial Industry Regulatory Authority (FINRA) 



-3 - 



stated June 16 that it fined Merrill Lynch $8 million for the company's failure to waive 
mutual fund sales charges for some retirement accounts and charities, and ordered the 
company to pay $24.4 million in restitutions. Merrill Lynch previously repaid another 
$64.8 million to investors who were overcharged. 

Source: http://www.finra.org/Newsroom/NewsReleases/2014/P530005 

9. June 14, Krebs on Security - (National) P.F. Chang's confirms credit card breach. 
P.F. Chang's Chinese Bistro stated June 14 that it had confirmed that it was the victim 
of a customer payment card data breach affecting an unknown number of customers. 
The company stated that it has temporarily switched to manual payment card 
imprinting to process transactions while the breach continues to be investigated. 

Source: http://krebsonsecuritv.com/2014/06/p-f-changs-confirms-credit-card-breach/ 

10. June 14, DNAinfo Chicago - (Illinois) Man accused of skimming 200 Chase Bank 
ATM cards: Prosecutors. A Romanian national was arrested June 12 in Chicago and 
was charged for allegedly placing skimming devices on Chase Bank ATMs in the city's 
North Side area, resulting in the theft of data from 200 cards. 

Source: http ://w w w. dnainfo .com/chicago/20 1 406 1 4/chicago/man-accused-of- 
skimming-200-chase-bank-atm-cards-prosecutors 

11. June 13, U.S. Securities and Exchange Commission - (California) SEC charges four 
California residents in $12 million insider trading scheme. The U.S. Securities and 
Exchange Commission filed charges June 13 against four California men for allegedly 
engaging in insider trading of Ross Stores stocks that resulted in $12 million in illicit 
profits. One of the accused worked in the finance department of Ross Stores 
headquarters and allegedly passed on insider information to three others in order to 
trade on the nonpublic information. 

Source: http://www.sec.gov/litigation/litreleases/2014/lr23022.htm 
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Transportation Systems Sector 

12. June 16, WCAU 10 Philadelphia - (Pennsylvania) Jet forced to circle area for hours, 
return to Philadelphia over landing gear issue. A Lufthansa jet leaving the 
Philadelphia International Airport bound for Germany June 15 was forced to circle the 
Philadelphia airport area for several hours shortly after takeoff to dump fuel in order to 
lighten the plane’s load for landing due to a landing gear malfunction. None of the 269 
passengers or crew were harmed 

Source: http://www.nbcphiladelphia.com/news/local/Low-Flying-Plane-Returns-to- 
Philadelphia- Airport-26323578 1 .html 

13. June 16, WISN 12 Milwaukee - (Wisconsin) Freight train derails on Milwaukee's 
south side. Ten cars of a Union Pacific freight train traveling to Chicago derailed in 
Milwaukee June 15 and forced around 12 other Union Pacific freight trains to be 
rerouted while crews cleared the scene. 
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Source: http://www.wisn.com/news/freight-train-derails-on-milwaukees-south- 
side/26501344 



14. June 15, KREM 2 Spokane - (Idaho) Head-on-crash closes highway near Spirit 
Lake. Both lanes of Highway 41 near Spirit Lake were closed for more than 2 hours 
June 15 after two vehicles were involved in a head-on-collision. At least four people 
were transported to a local hospital. 

Source: http://www.krem.com/news/Head-on-collision-closes-highway-near-Spirit- 
Lake-263221221.html 

15. June 14, KTLA 5 Los Angeles - (California) 110 Freeway temporarily closed after 
man threatens to jump from overpass. Los Angeles city officials shut down the 110 
Freeway in both directions for nearly 3 hours June 14 after a man threatened to jump 
off an overpass. Authorities were able to talk him down and get him psychiatric help. 
Source: http://ktla.eom/2014/06/14/l 10-freeway-closed-in-south-l-a-after-man- 
threatens-to-jump-from-bridge/ 

16. June 13, Associated Press - (Minnesota) Derailment disrupts commuter rail service. 
Minnesota metro transit officials reported about 16 empty Burlington Northern Santa 
Fe train cars derailed June 13 between Big Lake and Ramsey, causing the Northstar 
commuter rail line to be canceled and Amtrak trains form North Dakota to be detoured 
until tracks were cleared. 

Source: http://www.newsobserver.com/2014/06/13/3934426/derailment-disrupts- 
commuter-rail.html 

For additional stories, see items 1 and 43 
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Food and Agriculture Sector 

17. June 16, KHG1 13 Kearney/KWNB 6 Hayes Center - (Nebraska) Weekend storms 
wreak havoc on area farmers. Grain elevators at Keene’s Aurora Cooperative and 
Wilcox-based CPI, and a grain bin at K.A.A.P.A. ethanol were damaged by severe 
storms that moved through Nebraska June 14. High winds and heavy rainfall associated 
with the storms also knocked over grain bins and damaged crops in the area. 

Source: http://www.nebraska.tv/story/25782965/weekend-storms-wreak-havoc-on- 
area-farmers 

18. June 14, Buffalo News - (New York) Cause sought in fire that destroyed Olive 
Garden. Officials are investigating the cause of a fire that destroyed an Olive Garden 
restaurant in Blasdell, New York, June 14. No injuries were reported, and officials 
deemed the structure a total loss. 

Source: http://www.buffalonews.com/citv-region/hamburg/cause-sought-in-fire-that- 
destroyed-olive-garden-20140614 
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19. June 13, KTTC 10 Rochester - (Minnesota) Man nearly buried in corn rescued. 



Crews rescued a man who fell into a grain bin on a farm near Lewiston, Minnesota, 
June 12 by tying a rope around the victim, cutting a hole near the bottom of the bin to 
pump the com out, and using special rescue tubes. The man suffered non-life- 
threatening injuries. 

Source: http://ksn.com/2014/06/13/man-nearlv-buried-in-corn-rescued/ 

20. June 13, Chicago Tribune - (Illinois) Salmonella cases linked to Jewel in Tinley 
Park. The Cook County Department of Public Health is investigating a possible 
Salmonella outbreak connected to a Jewel Osco store in Tinley Park after reports of 
nine individuals being sickened after eating at the store’s service deli. The store closed 
its deli for several hours June 1 1 to undergo sanitization and deep cleaning and 
reopened with the approval of county officials. 

Source: http://articles.chicagotribune.com/2014-06-13/news/chi-salmonella-iewel- 
tinley-park-20140613 1 salmonella-cases-allison-sperling-amy-poore 

21. June 13, U.S. Food and Drug Administration - (National) Schnucks Bakery recalls 
Devil’s Food Cakes topped with undeclared pecans. The U.S. Food and Drug 
Administration announced June 13 that Schnucks Bakery issued a voluntary recall for 
two variations of its Devil’s Food Cakes decorated with pecans due to undeclared nuts. 
The products were sold at all Schnucks stores Missouri, Illinois, Indiana, Iowa, and 
Wisconsin. 

Source: http ://w w w.fda. gov/S afety/Recalls/ucm40 1227 .htm 

22. June 13, U.S. Department of Agriculture - (National) Illinois firm recalls turkey base 
product due to misbranding and undeclared allergen. The Food Safety and 
Inspection Service announced June 13 that Illinois-based Vanee Foods issued a recall 
for approximately 3,156 pounds of Imperial Sysco Turkey Base because the products 
were misbranded as chicken base and contain undeclared milk. The product was 
produced March 19 and sold in cases of 6, 1 pound containers that were distributed to 
food distribution centers in several States. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/2014/recall-035-2014-release 



23. June 12, U.S. Food and Drug Administration - (Connecticut; New Jersey; New York) 
La Finquita Cheese issues an allergy alert due to potential peanut and tree nut 
contamination in Fresh Farmers Cheese. The U.S. Food and Drug Administration 
announced June 12 that La Finquita, LLC issued a recall for one lot of its 14.1 1 ounce 
containers of La Finquita Quesito Fresco Campesino Fresh Farmer’s Cheese due to the 
possibility it may be adulterated with peanut and tree nut allergens. The recall was 
initiated after a supplier for the product notified La Finquita that milk used during the 
manufacturing process may be contaminated with peanuts and pistachios. 

Source: http ://ww w.fda. gov/S afety/Recalls/ucm40 1017 .htm 
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Water and Wastewater Systems Sector 



24. June 15, Des Moines Register - (Iowa) Most Iowa water utilities dump nitrates in 
rivers. Water authorities in Des Moines and the operators of most of Iowa's other 
nitrate removal systems stated that their facilities release nitrates removed during water 
treatment back into waterways, causing downstream facilities to have to remove the 
nitrates again. The practice is legal and often done because of the size and cost of 
systems that can reprocess the nitrates into useable fertili z ers. 

Source: http://www.desmoinesregister.com/story/news/2014/06/15/cities-often-send- 
nitrates-downstream-treatment/ 10544605/ 

25. June 13, SoMdNews - (Maryland) Beaches closed Friday after Chesapeake Beach 
sewage plant overflows. Several beaches in Calvert County were closed by the 
Maryland Department of the Environment until further notice due to a wastewater 
overflow June 13 from the Chesapeake Beach wastewater treatment plant reportedly 
caused by heavy rains between June 10 and June 13. 

Source: http ://w w w. somdnew s .com/article/20 1 406 1 3/NEW S/ 1 406 19330/ 

For another story, see item 4 
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Healthcare and Public Health Sector 



26. June 14, Madison Wisconsin State Journal - (Wisconsin) Police: Nurse at UW 

Hospital stole morphine from dozens of patients. A former nurse at the University of 
Wisconsin Hospital in Madison was arrested June 12 when investigators found that she 
stole syringes of hydromorphone and morphine at least 40 times between October and 
March, and refilled the syringes with water or saline. Authorities were alerted in March 
and the hospital put her on leave before she ended her employment in April. 

Source: http://host.madison.com/wsj/news/local/crime and courts/police-nurse-at-uw- 
hospital- stole-morphine-from-dozens-of/article 378181 d9- 1 9f5 -5f25 -97a5 - 
48d411176620.html 



For another story, see item 41 
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Government Facilities Sector 



27. June 16, CBS News - (California) Race against time in battle vs. California wildfire 
threatening more than 1,000 homes. Crews in Bakersfield, California, worked to 
contain the 2,000-acre Shirley Fire June 15 while more than 1,000 threatened 
residences were ordered to evacuate. At least 2 structures near the Sequoia National 
Forest were destroyed by the fire. 

Source: http://www.cbsnews.com/news/race-against-time-in-battle-vs-california- 
wildfire-threatening-more-than- 1 000-homes/ 
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28. June 15, Albuquerque Journal - (New Mexico; Iowa) Two Chinese arrested in 
military device smuggling case. Search warrant records were unsealed the week of 
June 9 detailing how Albuquerque, New Mexico authorities arrested two Chinese 
nationals in 2013 and 2014 for allegedly attempting to export sensors used in military 
guidance systems after brokering a deal with an undercover agent in New Mexico. One 
suspect attempted to purchase up to 20 sensors for research projects while working as a 
graduate research assistant at the Iowa State University while the other suspect was 
caught attempting to board a flight to China hiding a sensor in computer speaker. 
Source: http://www.abqiournal.com/415940/news/chinese-held-in-military- 
smuggling.html 

29. June 15, KTVK 3 Phoenix - (Arizona) Jack Fire at 1,250 acres with 65 percent 
containment. Fire crews reached 65 percent containment and established a line around 
the perimeter of the Jack Fire June 15 after it burned through 1,250 acres in the 
Coconino National Forest in Happy Jack, Arizona. 

Source: http://www.azfamilv.com/news/Wildfire-burning-northeast-of-Happv-Jack- 
263164501.html 

30. June 14, WJHL 11 Johnson City - (Tennessee) Two teens charged with foiled 
Columbine-inspired mass shooting plot at Volunteer High. The Hawkins County 
Sheriffs Office announced June 13 that two juveniles were arrested for allegedly 
planning a mass shooting at Volunteer High School in Church Hill, Tennessee. 
Investigators found several guns, journals, firecrackers, and floor plans of the high 
school during a search of one suspect’s home in December. 

Source: http://www.wihl.com/story/25763800/two-male-iuveniles-charged-for- 
allegedly-planning-mass-shooting-at-hawkins-county-school 

31. June 13, Bogalusa Daily News - (Louisiana) Franklinton clerks admit to 
‘borrowing’ from collections. Two former employees of the Town of Franklinton in 
Louisiana admitted taking more than $50,200 in utility and property tax receipts from 
the town, according to a report released June 9 by the legislative auditor’s office. The 
two clerks would deposit payments late and charge a late fee or intentionally alter cash 
payment dates to reflect late payments or no payments. 

Source: http://www.gobogalusa.com/news/article 5892194e-f302-l Ie3-88e8- 
0019bb2963f4.html 

32. June 13, Muncie Star Press - (Indiana; New York) Ball State reveals second fraud 
case of $5 million. Ball State University in Indiana announced June 13 that the 
university was the victim of two investment fraud schemes allegedly made by a former 
director of cash and investments including an $8.1 million investment scandal reported 
to federal prosecutors in New York City and a separate $5 million fraud investment. 
Source: http://www.thestarpress.com/article/20140614/NEWS01/306140Q15/Ball- 
State-University- fraud-financial-fraud 

33. June 13, KOIN 6 Portland - (Oregon) Two Bulls fire now 70% contained. Officials 
reported June 13 that the Two Bulls Fire was 70 percent contained after burning over 
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6,000 acres in Bend, Oregon. Authorities are offering a $36,825 reward for any 
information leading to the conviction of the individual or individuals responsible for 
the fire. 

Source: http://koin.com/2014/06/13/two-bulls-fire-now-70-contained/ 

For another story, see item 44 
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Emergency Services Sector 

Nothing to report 
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Information Technology Sector 

34. June 16, Softpedia - (International) NAS boxes "pwned" by crypto currency miner. 
Researchers with Dell SecureWorks released a report which showed how an attacker 
was able to utilize vulnerabilities in the DiskStation Manager (DSM) operating system 
used in Synology network access storage (NAS) devices to plant the CPUMiner crypto 
currency mining malware. The attacker used the malware to mine over $600,000 in the 
Dogecoin crypto currency, though the vulnerabilities were later patched by Synology. 
Source: http://news.softpedia.com/news/NAS-Boxes-Pwnwed-bv-Crypto-Currencv- 
Miner-446 883. shtml 

35. June 13, Threatpost - (International) ISC patches critical DoS vulnerability in BIND. 
The Internet Systems Consortium (ISC) reported June 11 that a vulnerability exists in 
some BIND domain name system (DNS) servers that could allow attackers to perform 
denial of service (DoS) attacks by sending a specially designed query. The ISC advised 
users to update to the newest version of BIND, which is not vulnerable. 

Source: http://threatpost.com/isc-patches-critical-dos-vulnerability-in-bind/106653 

For another story, see item 7 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



T Return to too l 



-9 - 



Communications Sector 



36. June 13, Softpedia - (National) AT&T customer details accessed without 
authorization. Some AT&T customers were informed by letter that employees at one 
of the company's service providers may have accessed personal identifiable 
information, including Social Security numbers, without authorization somewhere 
between April 9 and April 21. 

Source: http://news.softpedia.com/news/AT-T-Customer-Details-Accessed-without- 
Authorization-446701 .shtml 

37. June 13, KOVR 13 Sacramento - (California) Comcast, Verizon outage in Vacaville, 
Fairfield caused by construction crews. Customers of Comcast and Verizon in the 
Vacaville and Fairfield areas of California experienced outages for several hours due to 
a construction crew cutting a fiber optic line that serves both companies. Crews were 
on the scene making repairs. 

Source: http://sacramento.cbslocal.com/2014/06/13/maior-comcast-outage-affecting- 
intemet-customers-from-roseville-to-san-iose/ 
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Commercial Facilities Sector 

38. June 16, KLFY 10 Lafayette- (Louisiana) Police investigate shooting at downtown 
nightclub. Police are investigating after a man opened fire inside Shakers Nightclub in 
Lafayette June 15 and injured at least 3 individuals. 

Source: http://www.klfv.com/story/25783291/police-investigate-shooting-at- 
downtown-nightclub 

39. June 15, KSAT 12 San Antonio - (Texas) Apartment fire toll tops $1 million. 
Firefighters responded to the Oasis Oakwell apartment complex in San Antonio June 
15 when a fire broke out and damaged 15 units, causing approximately $1.5 million in 
damage. Fifteen residents were displaced by the incident, which officials are 
investigating as possible arson. 

Source: http://www.ksat.com/news/2-arrested-in-connection-to-ne-apartment-complex- 
fire/26499592 

40. June 15, KNSD 39 San Diego - (California) 3 injured in Point Loma apartment fire. 
Fire officials believe vapors from a bathtub refurbishing project were sparked by 
electrical tools, causing an explosion at the Loma Flighlands Apartments in Point Loma 
June 14 that caused an estimated $300,000 in damages. Three individuals were 
transported to an area hospital with injuries and 20 to 25 residents were displaced. 
Source: http://www.nbcsandiego.com/news/local/Witness-Explosion-Heard-Before- 
Point-Loma- Apartment-Fire-263 1 66501 .htrnl 



41. June 15, WBGZ 1570 AM Alton; Alton Daily News - (Illinois) Fire destroys building 
in Bunker Hill. Authorities are investigating the cause of a 5-alarm fire that broke out 
June 14 and destroyed a 3-story Bunker Hill, Il linois apartment complex that also 
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housed a chiropractic and physical therapy practice. 

Source: http://altondailynews.com/news/details.cfm?clientid=17&id=131328 

42. June 14, WSPA 7 Spartanburg - (South Carolina) One person killed in Greenville 
County nightclub shooting. Police responded to the Black and Mild Club in 
Greenville County, South Carolina, June 14 after a patron was fatally shot following an 
altercation with another party inside the venue. Authorities are investigating the 
incident. 

Source: http://www.wspa.com/storv/25776808/one-person-killed-in-greenville-countv- 
nightclub-shooting 

For additional stories, see items 1 and 9 
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Dams Sector 

43. June 16, Associated Press - (New York) Eastern section of Erie Canal set to reopen. 
The eastern section of the Erie Canal on Oneida Lake in New York reopened June 16 
after being closed June 14 due to heavy rains throughout the week that caused high 
water levels. 

Source: http://poststar.com/news/state-and-regional/eastem-section-of-erie-canal-set- 
to-reopen/article 406a6a43-lfb5-5f9d-91 16-6d9a632b7a93.html 

44. June 15, KSFY 13 Sioux Falls - (South Dakota) Dam fails at Blue Mounds State 
Park. A dyke failure on the Blue Mounds Creek at Blue Mounds State Park in 
Minnesota caused a dam on the lake to be overwhelmed and created a breach on the 
side of the dam, causing water levels to drop June 14. The swimming beach at the park 
was closed until further notice and there was no repair date set. 

Source: http://www.ksfv.com/storv/25782086/dam-fails-at-blue-mound-state-park 
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